Re: [vchkpw] Message to ALL Was Shane's: Re: [vchkpw] FW: failure notice
I tried to email Ken Jones [EMAIL PROTECTED] about this, but efilter on their server blocked my message. Ken, if you get this, please unsub [EMAIL PROTECTED] On Monday, September 8, 2003, at 06:43 PM, Chris Pugh wrote: Looks like I was right after all about those messages Shane .. still coming they are... and look what turned up .. = Scan result: Virus [EMAIL PROTECTED] found. == Please ref: http://www.symantec.com/avcenter/venc/data/[EMAIL PROTECTED] Told you I was receiving rubbish responses. Watch out all! Regards, Chris. --- Shane Chrisp [EMAIL PROTECTED] wrote: Can we either get cz at neospire dot net to fix the procmail/preline error or get them unsub'd from the list. These bounces are getting very annoying. Shane -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, 8 September 2003 10:30 PM To: [EMAIL PROTECTED] Subject: failure notice Hi. This is the qmail-send program at lump.internal.neospire.net. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't work out. [EMAIL PROTECTED]: preline: fatal: unable to run procmail: file does not exist --- Below this line is a copy of the message. Return-Path: [EMAIL PROTECTED] Received: (qmail 9160 invoked from network); 8 Sep 2003 14:30:10 - Received: from unknown (HELO localhost) (127.0.0.1) by lump with SMTP; 8 Sep 2003 14:30:10 - Received: from mail.neospire.net [66.111.111.18] by localhost with POP3 (fetchmail-6.2.2) for [EMAIL PROTECTED] (single-drop); Mon, 08 Sep 2003 09:30:10 -0500 (CDT) Received: from ns1.inter7.com [209.218.8.2] by mail.neospire.net (SMTPD32-5.05) id A10E10660048; Mon, 08 Sep 2003 09:24:14 -0500 Received: (qmail 30521 invoked by uid 511); 8 Sep 2003 15:38:47 - Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm Precedence: bulk List-Post: mailto:[EMAIL PROTECTED] List-Help: mailto:[EMAIL PROTECTED] List-Unsubscribe: mailto:[EMAIL PROTECTED] List-Subscribe: mailto:[EMAIL PROTECTED] Delivered-To: mailing list [EMAIL PROTECTED] Received: from unknown (HELO droopy.2000cn.com.au) (202.154.116.2) by evanston.inter7.com with SMTP; 8 Sep 2003 15:38:46 - Reply-To: [EMAIL PROTECTED] From: Shane Chrisp [EMAIL PROTECTED] To: [EMAIL PROTECTED] Date: Mon, 8 Sep 2003 22:24:01 +0800 Organization: 2000 Computers Networks Message-ID: [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.4510 In-Reply-To: [EMAIL PROTECTED] X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Importance: Normal Subject: RE: [vchkpw] Hacked machine X-RCPT-TO: [EMAIL PROTECTED] X-UIDL: 1634 Status: U And if your using a mysql backend, dump the db aswell :) -Original Message- From: Rick Macdougall [mailto:[EMAIL PROTECTED] Sent: Monday, 8 September 2003 10:17 PM To: Widmer Hannes Cc: vpopmail list Subject: Re: [vchkpw] Hacked machine Hi, Widmer Hannes wrote: Hello List I have a hacked machine and I have to reinstall this one tonight. Now, my short question is, what the best way is to backup / restore user's mailboxes. Is it enought if I only macke a copy of my vpopmail/domains dir ?. /pathto/vpopmail/domains/* /pathto/qmail/control/* /pathto/qmail/users/* One gotcha is the uid and gid in /pathto/qmail/users/assign, make sure it matches vpopmail.vchkpw Regards, Rick __ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com -- Tom Collins [EMAIL PROTECTED] Project Admin of http://qmailadmin.sf.net/ and http://vpopmail.sf.net/ http://sniffter.com/ - info on the Sniffter hand-held Network Tester
[vchkpw] Message to ALL Was Shane's: Re: [vchkpw] FW: failure notice
Looks like I was right after all about those messages Shane .. still coming they are... and look what turned up .. = Scan result: Virus [EMAIL PROTECTED] found. == Please ref: http://www.symantec.com/avcenter/venc/data/[EMAIL PROTECTED] Told you I was receiving rubbish responses. Watch out all! Regards, Chris. --- Shane Chrisp [EMAIL PROTECTED] wrote: Can we either get cz at neospire dot net to fix the procmail/preline error or get them unsub'd from the list. These bounces are getting very annoying. Shane -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, 8 September 2003 10:30 PM To: [EMAIL PROTECTED] Subject: failure notice Hi. This is the qmail-send program at lump.internal.neospire.net. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't work out. [EMAIL PROTECTED]: preline: fatal: unable to run procmail: file does not exist --- Below this line is a copy of the message. Return-Path: [EMAIL PROTECTED] Received: (qmail 9160 invoked from network); 8 Sep 2003 14:30:10 - Received: from unknown (HELO localhost) (127.0.0.1) by lump with SMTP; 8 Sep 2003 14:30:10 - Received: from mail.neospire.net [66.111.111.18] by localhost with POP3 (fetchmail-6.2.2) for [EMAIL PROTECTED] (single-drop); Mon, 08 Sep 2003 09:30:10 -0500 (CDT) Received: from ns1.inter7.com [209.218.8.2] by mail.neospire.net (SMTPD32-5.05) id A10E10660048; Mon, 08 Sep 2003 09:24:14 -0500 Received: (qmail 30521 invoked by uid 511); 8 Sep 2003 15:38:47 - Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm Precedence: bulk List-Post: mailto:[EMAIL PROTECTED] List-Help: mailto:[EMAIL PROTECTED] List-Unsubscribe: mailto:[EMAIL PROTECTED] List-Subscribe: mailto:[EMAIL PROTECTED] Delivered-To: mailing list [EMAIL PROTECTED] Received: from unknown (HELO droopy.2000cn.com.au) (202.154.116.2) by evanston.inter7.com with SMTP; 8 Sep 2003 15:38:46 - Reply-To: [EMAIL PROTECTED] From: Shane Chrisp [EMAIL PROTECTED] To: [EMAIL PROTECTED] Date: Mon, 8 Sep 2003 22:24:01 +0800 Organization: 2000 Computers Networks Message-ID: [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.4510 In-Reply-To: [EMAIL PROTECTED] X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Importance: Normal Subject: RE: [vchkpw] Hacked machine X-RCPT-TO: [EMAIL PROTECTED] X-UIDL: 1634 Status: U And if your using a mysql backend, dump the db aswell :) -Original Message- From: Rick Macdougall [mailto:[EMAIL PROTECTED] Sent: Monday, 8 September 2003 10:17 PM To: Widmer Hannes Cc: vpopmail list Subject: Re: [vchkpw] Hacked machine Hi, Widmer Hannes wrote: Hello List I have a hacked machine and I have to reinstall this one tonight. Now, my short question is, what the best way is to backup / restore user's mailboxes. Is it enought if I only macke a copy of my vpopmail/domains dir ?. /pathto/vpopmail/domains/* /pathto/qmail/control/* /pathto/qmail/users/* One gotcha is the uid and gid in /pathto/qmail/users/assign, make sure it matches vpopmail.vchkpw Regards, Rick __ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com
RE: [vchkpw] Message to ALL Was Shane's: Re: [vchkpw] FW: failure notice
Ahh.. I have notifications turned off at the virus scanning mail server. If I check the logs, I bet there is a heap of Sobig.F from this sender. Shane -Original Message- From: Chris Pugh [mailto:[EMAIL PROTECTED] Sent: Tuesday, 9 September 2003 9:43 AM To: [EMAIL PROTECTED] Subject: [vchkpw] Message to ALL Was Shane's: Re: [vchkpw] FW: failure notice Looks like I was right after all about those messages Shane .. still coming they are... and look what turned up .. = Scan result: Virus [EMAIL PROTECTED] found. == Please ref: http://www.symantec.com/avcenter/venc/data/[EMAIL PROTECTED] Told you I was receiving rubbish responses. Watch out all! Regards, Chris. --- Shane Chrisp [EMAIL PROTECTED] wrote: Can we either get cz at neospire dot net to fix the procmail/preline error or get them unsub'd from the list. These bounces are getting very annoying. Shane -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, 8 September 2003 10:30 PM To: [EMAIL PROTECTED] Subject: failure notice Hi. This is the qmail-send program at lump.internal.neospire.net. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't work out. [EMAIL PROTECTED]: preline: fatal: unable to run procmail: file does not exist --- Below this line is a copy of the message. Return-Path: [EMAIL PROTECTED] Received: (qmail 9160 invoked from network); 8 Sep 2003 14:30:10 - Received: from unknown (HELO localhost) (127.0.0.1) by lump with SMTP; 8 Sep 2003 14:30:10 - Received: from mail.neospire.net [66.111.111.18] by localhost with POP3 (fetchmail-6.2.2) for [EMAIL PROTECTED] (single-drop); Mon, 08 Sep 2003 09:30:10 -0500 (CDT) Received: from ns1.inter7.com [209.218.8.2] by mail.neospire.net (SMTPD32-5.05) id A10E10660048; Mon, 08 Sep 2003 09:24:14 -0500 Received: (qmail 30521 invoked by uid 511); 8 Sep 2003 15:38:47 - Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm Precedence: bulk List-Post: mailto:[EMAIL PROTECTED] List-Help: mailto:[EMAIL PROTECTED] List-Unsubscribe: mailto:[EMAIL PROTECTED] List-Subscribe: mailto:[EMAIL PROTECTED] Delivered-To: mailing list [EMAIL PROTECTED] Received: from unknown (HELO droopy.2000cn.com.au) (202.154.116.2) by evanston.inter7.com with SMTP; 8 Sep 2003 15:38:46 - Reply-To: [EMAIL PROTECTED] From: Shane Chrisp [EMAIL PROTECTED] To: [EMAIL PROTECTED] Date: Mon, 8 Sep 2003 22:24:01 +0800 Organization: 2000 Computers Networks Message-ID: [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook, Build 10.0.4510 In-Reply-To: [EMAIL PROTECTED] X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Importance: Normal Subject: RE: [vchkpw] Hacked machine X-RCPT-TO: [EMAIL PROTECTED] X-UIDL: 1634 Status: U And if your using a mysql backend, dump the db aswell :) -Original Message- From: Rick Macdougall [mailto:[EMAIL PROTECTED] Sent: Monday, 8 September 2003 10:17 PM To: Widmer Hannes Cc: vpopmail list Subject: Re: [vchkpw] Hacked machine Hi, Widmer Hannes wrote: Hello List I have a hacked machine and I have to reinstall this one tonight. Now, my short question is, what the best way is to backup / restore user's mailboxes. Is it enought if I only macke a copy of my vpopmail/domains dir ?. /pathto/vpopmail/domains/* /pathto/qmail/control/* /pathto/qmail/users/* One gotcha is the uid and gid in /pathto/qmail/users/assign, make sure it matches vpopmail.vchkpw Regards, Rick __ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com
